Leading global teams of engineers with passion building, administering large scale data platforms and data pipelines by using end-to-end automation in DC, AWS, and in GCP.Achieved a cost savings in Millions of $ by an availability improvement of storing PetaBytes of data at source of origin environments & still providing centralized visbility, meeting audits and various compliances for customers and internal business units.Negotiated various software contracts with suppliers and drove projects for process automation and the new design of the security tools.Built an alerting and monitoring program for security tools meeting our SLOs & SLAs.

People leader leading security engineers to run SIEM & SOAR platforms.Scaled the deployment from DC to public clouds around the globe to keep up with growth in security data.Increased data ingestion capabilities 10x times in a reliable way around the globe and took the cluster from a multi terabytes to petabytes of storage.

Defined, and helped prioritize changes following security best practices to AWS Strategic accounts – Fortune 50 companies, to help them meet their security and compliance requirements in AWS.Designed, and architected security solutions leveraging various AWS services.

Led a global team of engineers to build detection monitoring and logging platforms using ML. Platform leveraged various big data stacks (Hadoop, Scala, Spark) , AWS ELK, and Splunk integrations.Drove long term historical search feature to integrate various data sets stored in S3 buckets by normalizing data, using Presto on EMR stack with Hadoop & Spark in AWS to query data. Saving millions of dollars in cost.Designed, and deployed scalable public cloud host and network intrusion detection platform using Terraform. Solution leveraged native AWS tap solution providing much needed IDS capabilities into Salesforce cloud.Architected WAF service component integration with Envoy proxy to build L7 firewall in service mesh.

Designed a cohesive container security monitoring solution after identification of inefficiencies in tracking container securities, data pipeline and refactored the work of several teams across platform, security, and CI/CD.Contributed towards multiple strategic decisions from GE leadership to help improve Predix security services, reliability and scalability to make it a PaaS – GE Internet for industrials, saving millions of dollars in licensing cost.Architected and implemented indicators of compromise (IOC’s) ingestion into IDS running in AWS. Created centralized configuration management, and monitoring capabilities security engineering & operations teams.Developed reference, and functional architectures for IoT services for GE Predix cloud.

Architected, and designed Network Security Monitoring (NSM) using Zeek and Suricata intrusion detection systems (IDS) in 100/40/10Gb networks. Managed a few hundred IDS nodes via Chef cookbooks.Created design requirements to scale Ntop's Cento (netflow and DPI collector) tool in distributed environments and contributed towards development of open source Ntop - PFRing solution by testing in 100Gb networks.Architected multiple network designs in partnership with internal Yahoo enterprise architecture teams to use 100/40/10Gb taps to aggregate traffic to support multiple security tools for NSM.Built correlation rules and data models in Splunk to provide assistance to Paranoids incident response team.

Led Security Operations and Security Engineering to protect, detect, and monitor Intuit's services.Developed security operations capabilities, improved processes, and architected security solutions configrming to tax, legal regulation in DC & AWS.Designed and implemented an internal pen testing program to support vulnerability management processes.Managed Splunk deployment, analyzed data which led to improvements in Security monitoring & detection.Drove changes in fraud detection program to detect account take over (ATO) & stolen identity refund fraud (SIRF).

Contributed to the CSFI red cell division which is a prestigious group of cyber security volunteers specialized in vulnerability testing, penetration testing, reverse engineering and full spectrum offensive cyber operations. Participated in software and hardware hacking challenges.

Pen tested GreatCall's web services offered to their external customers using Burp suite, BackTrack, W3af.Led development of end-to-end encryption for customer data transfer and storage for Med Coach & Live Nurse applications.

Designed a single cohesive solution after identification of inefficiencies to build SIEM based log collection and monitoring capabilities. Built detection capabilities by writing rules in SIEM. Configured and mainted various other security tools, such as IDS, ESET AV.

Led incident response for SaaS platform for Websense customers.Defined, prioritized, and drove pen testing for application security to support timely cutomer releases. Reverse engineered Viruses, Malwares using security software (open source, commercial and internally developed) such as IDA pro, Soft Ice.Managed & deployed Cisco ASA, Checkpoint firewalls and IDS.

Led Network Security program to provide incident response support for Business Program Automation (BPA) project for Secretary of State at Sacramento, California.

Assisted the Computer Security Incident Response Team (CSIRT) in security incident response.Designed and implemented IDS for the College of Engineering. Wrote new rules to assist Snort community to identify new attacks. Developed MySQL Snort database purging scripts.

Responsible for monitoring and configuring the backend network to support ISP customers.